Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Oh, I Found a Security Issue (Python.Pizza.Berl...

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Markus H Markus H
February 23, 2019
Technology
13k
0

Oh, I Found a Security Issue (Python.Pizza.Berlin 🐍🍕🐻)

A very short version of my "Oh, I Found a Security Issue" talk.

Avatar for Markus H

Markus H

February 23, 2019

More Decks by Markus H

See All by Markus H
🐍 ❤️ 🦀 — Python loves Rust
Avatar for Markus H markush
0
280
Knock! Knock! Who's There?
Avatar for Markus H markush
0
86
An Introduction To Kubernetes ☸
Avatar for Markus H markush
0
130
Writing Safe Database Migrations (DjangoCon Europe 2021)
Avatar for Markus H markush
0
14k
A Pony On The Move: How Migrations Work In Django 🐎
Avatar for Markus H markush
0
13k
All Hands on Deck — Handling Security Issues
Avatar for Markus H markush
0
14k
Logging Rethought 2: The Actions of Frank Taylor Jr. (PyCon UK 2019)
Avatar for Markus H markush
0
73
Logging Rethought 2: The Actions of Frank Taylor Jr. (PyCon Australia 2019)
Avatar for Markus H markush
1
230
Logging Rethought 2: The Actions of Frank Taylor Jr. (DjangoCon Europe 2019)
Avatar for Markus H markush
0
13k

Other Decks in Technology

See All in Technology
サービスの信頼性を高めるため、形骸化した「プロダクションミーティング」を立て直すまでの取り組み
Avatar for すてにゃん stefafafan
1
220
Percolatorを廃止し、マルチ検索サービスへ刷新した話 / Search Engineering Tech Talk 2026 Spring
Avatar for Visional Engineering ＆ Design visional_engineering_and_design
0
240
[Scram Fest Niigata2026]Quality as Code〜AIにQAの思考を再現させる試み〜
Avatar for Masami Yajiri masamiyajiri
1
180
世界の中心でApp Runnerを叫ぶ FINAL
Avatar for つくぼし tsukuboshi
0
210
[Oracle TechNight#99] 生成AI時代のAI/ML入門 ~ AIとオラクルデータベースの関係 (前半)
Avatar for oracle4engineer oracle4engineer
PRO
1
210
MySQL 9.7がやってきた ～これまでのあらすじと基本情報～ @ 日本MySQLユーザ会会2026年04月 / mysql97-yattekita
Avatar for sakaik sakaik
0
170
Oracle Cloud Infrastructure：2026年4月度サービス・アップデート
Avatar for oracle4engineer oracle4engineer
PRO
0
290
ファインディの事業拡大を支える 拡張可能なデータ基盤へのリアーキテクチャ
Avatar for Noriaki Hiraki hiracky16
0
800
Forget technical debt
Avatar for Uwe Friedrichsen ufried
0
160
アクセシビリティはすべての人のもの
Avatar for tomokusaba tomokusaba
0
240
EMから幅を広げるために最近挑戦していること / Recent challenges I'm undertaking to expand my horizons beyond EM
Avatar for hiro-torii hiro_torii
1
180
エージェント時代の UIとAPI、CLI戦略
Avatar for coincheck coincheck_recruit
0
120

Featured

See All Featured
AI: The stuff that nobody shows you
Avatar for John Nunemaker jnunemaker
PRO
6
620
[SF Ruby Conf 2025] Rails X
Avatar for Vladimir Dementyev palkan
2
1k
Leading Effective Engineering Teams in the AI Era
Avatar for Addy Osmani addyosmani
9
1.9k
Introduction to Domain-Driven Design and Collaborative software design
Avatar for Kenny Baas-Schwegler baasie
1
760
Code Reviewing Like a Champion
Avatar for maltzj maltzj
528
40k
Designing Dashboards & Data Visualisations in Web Apps
Avatar for Des Traynor destraynor
231
54k
svc-hook: hooking system calls on ARM64 by binary rewriting
Avatar for Akira Moroo retrage
2
230
Embracing the Ebb and Flow
Avatar for Simon Collison colly
88
5k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
32
2.9k
What’s in a name? Adding method to the madness
Avatar for The Alliance productmarketing
PRO
24
4k
How to Grow Your eCommerce with AI & Automation
Avatar for Katarina Dahlin katarinadahlin
PRO
1
180
Agile that works and the tools we love
Avatar for Rasmus Luckow-Nielsen rasmusluckow
331
21k

Transcript

  1. @m_holtermann Oh, I Found a Security Issue

  2. @m_holtermann Hi, I’m Markus Holtermann • Engineer at • Django

    Core Contributor markusholtermann.eu • github.com/MarkusH • @m_holtermann

  3. @m_holtermann Oh, I Found a Security Issue

  4. @m_holtermann Should I report a security issue? ▢ yes ▢

    no ▢ maybe

  5. @m_holtermann Where to report?

  6. @m_holtermann Where’s my fix?

  7. @m_holtermann Does it actually solve the issue?

  8. @m_holtermann Here you go!

  9. @m_holtermann TIL Today I Learned

  10. @m_holtermann Thank you! @m_holtermann